diff --git a/.github/workflows/pr-severity.yml b/.github/workflows/pr-severity.yml
index dcf6677dd1..10c672d96e 100644
--- a/.github/workflows/pr-severity.yml
+++ b/.github/workflows/pr-severity.yml
@@ -49,6 +49,18 @@ jobs:
           prompt: |
             You are a PR severity classifier for the lnd (Lightning Network Daemon) repository.
 
+            ## Tool Constraints
+
+            You ONLY have access to these commands:
+            - `gh pr view` - to read PR metadata
+            - `gh pr edit` - to add/remove labels
+            - `gh pr comment` - to post comments
+
+            You do NOT have access to `gh api`, `gh label`, or any other
+            `gh` subcommand. Do not attempt to use them. For ALL label
+            operations, use `gh pr edit` with `--add-label` or
+            `--remove-label`.
+
             ## Your Task
 
             Analyze PR #${{ github.event.pull_request.number }} and: